From 4cbcdf911520f3ea7ac42b69cd270caaea83c678 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Tue, 11 Jan 2005 00:49:13 +0000
Subject: fastforwarding is not compatible with ipsec tunnels -- turn it off if
 the user has ipsec tunnels.

---
 etc/inc/vpn.inc | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'etc/inc/vpn.inc')

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index f90de3f..20408db 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -94,6 +94,9 @@ function vpn_ipsec_configure($ipchg = false) {
 
 	if (isset($ipseccfg['enable'])) {
 
+		/* fastforwarding is not compatible with ipsec tunnels */
+		sysctl("sysctl net.inet.ip.fastforwarding=0");
+
 		if (!$curwanip) {
 			/* IP address not configured yet, exit */
 			if ($g['booting'])
-- 
cgit v1.1